Exchange Server 2013 部署（二）部署&常規(guī)配置命令[二]

繼續(xù)使用命令設(shè)置Exchange Server 2013 的常規(guī)配置。
1.使用命令創(chuàng)建證書請求文件
New-ExchangeCertificate -GenerateRequest -FriendlyName "Mail-Cert" -DomainName mail.msftlearn.com,autodiscover.msftlearn.com -PrivateKeyExportable $true -KeySize 2048 -RequestFile C:\mailcert.req

2.在IE瀏覽器中輸入證書服務(wù)器IP地址/certsrv

3.輸入有權(quán)限頒發(fā)證書的用戶名及密碼，確定

4.選擇申請證書

5.選擇高級證書申請

6.選擇使用base64編碼的CMC或PKCS#10文件提交

7.Copy 二進(jìn)制的證書請求內(nèi)容

8.粘貼到Base-64文本框中，證書模板選擇Web服務(wù)器，提交

9.選擇Base 64 編碼，下載證書

10.保存證書位置

11.使用命令導(dǎo)入證書并分配服務(wù)
Import-ExchangeCertificate -FileName C:\mailcert.cer | Enable-ExchangeCertificate -Services "iis,smtp,pop,imap"

12.選擇全是

Exchange Server 2013 的基本配置已經(jīng)完成。
以下是用到的Exchange PowerShell 腳本，請參考：
先決條件腳本

Install-WindowsFeature RSAT-ADDS
Import-Module ServerManager
Install-WindowsFeature AS-HTTP-Activation, Desktop-Experience, NET-Framework-45-Features, RPC-over-HTTP-proxy, RSAT-Clustering, RSAT-Clustering-CmdInterface, RSAT-Clustering-Mgmt, RSAT-Clustering-PowerShell, Web-Mgmt-Console, WAS-Process-Model, Web-Asp-Net45, Web-Basic-Auth, Web-Client-Auth, Web-Digest-Auth, Web-Dir-Browsing, Web-Dyn-Compression, Web-Http-Errors, Web-Http-Logging, Web-Http-Redirect, Web-Http-Tracing, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Lgcy-Mgmt-Console, Web-Metabase, Web-Mgmt-Console, Web-Mgmt-Service, Web-Net-Ext45, Web-Request-Monitor, Web-Server, Web-Stat-Compression, Web-Static-Content, Web-Windows-Auth, Web-WMI, Windows-Identity-Foundation, RSAT-ADDS
Restart-Computer
D:
.\setup /PrepareSchema /IAcceptExchangeServerLicenseTerms
.\setup /Preparead /IAcceptExchangeServerLicenseTerms /OrganizationName:Msftlearn
.\setup /Preparealldomains /IAcceptExchangeServerLicenseTerms

Add-DnsServerResourceRecordA -ZoneName msftlearn.com -Name mail -IPv4Address 192.168.10.200
Add-DnsServerResourceRecordA -ZoneName msftlearn.com -Name autodiscover -IPv4Address 192.168.10.200

基本配置腳本

#加載Exchange 模塊
Add-PSSnapin microsoft.exchange.*
#新建接受域
New-AcceptedDomain -Name msftlearn.com -DomainName msftlearn.com -DomainType Authoritative
#新建電子郵件地址策略
New-EmailAddressPolicy -Name EmailAddress -IncludedRecipients MailboxUsers -EnabledPrimarySMTPAddressTemplate %m@msftlearn.com
#應(yīng)用電子郵件地址策略
Update-EmailAddressPolicy -Identity EmailAddress
#設(shè)置組織傳輸大小
Set-TransportConfig -MaxReceiveSize 30MB -MaxSendSize 30MB -MaxRecipientEnvelopeLimit 200
#設(shè)置接收連接器的大小限制
Get-ReceiveConnector | Set-ReceiveConnector -MaxMessageSize 30MB
#去掉匿名
Get-ReceiveConnector "Default Frontend SRV12-EX1301" | Set-ReceiveConnector -PermissionGroups ExchangeLegacyServers,ExchangeServers
#新建發(fā)送連接器
New-SendConnector -Name "To Internet" -Internet -MaxMessageSize 30MB -AddressSpaces * -SourceTransportServers "Srv12-ex1301.msftlearn.local"
#設(shè)置Exchange 服務(wù)器許可
Set-ExchangeServer -Identity Srv12-ex1301 -ProductKey XXXX-XXXX-XXXX-XXXX
#設(shè)置Outlook Anywhere 
Get-OutlookAnywhere | Set-OutlookAnywhere -SSLOffloading $true -InternalHostname "mail.msftlearn.com" -ExternalClientsRequireSsl $true -ExternalHostname "mail.msftlearn.com" -InternalClientsRequireSsl $true -InternalClientAuthenticationMethod Basic -ExternalClientAuthenticationMethod Basic
#設(shè)置POP服務(wù)
Set-PopSettings -Server Srv12-ex1301 -LoginType PlainTextLogin
#設(shè)置pop服務(wù)為自動啟動并運(yùn)行pop服務(wù)
Set-Service MSExchangePop3 -StartupType Automatic
Set-Service MSExchangePOP3BE -StartupType Automatic
Start-Service MSExchangePop3* 
#設(shè)置IMAP服務(wù)
Set-ImapSettings -Server Srv12-ex1301 -LoginType PlainTextLogin
#設(shè)置IMAP服務(wù)為自動啟動并運(yùn)行pop服務(wù)
Set-Service MSExchangeImap4 -StartupType Automatic
set-service MSExchangeIMAP4BE -StartupType Automatic
Start-Service MSExchangeImap4*
#新建數(shù)據(jù)庫并設(shè)置脫機(jī)地址簿
New-MailboxDatabase -Name DB01 -Server Srv12-ex1301 -EdbFilePath C:\DB\DB01.edb -LogFolderPath C:\DB -OfflineAddressBook "Default Offline Address Book"
Mount-Database -Identity DB01
#設(shè)置虛擬目錄
Get-OwaVirtualDirectory | Set-OwaVirtualDirectory -InternalUrl https://mail.msftlearn.com/owa -ExternalUrl https://mail.msftlearn.com/owa -LogonFormat UserName -DefaultDomain msftlearn.local
Get-EcpVirtualDirectory | Set-EcpVirtualDirectory -InternalUrl https://mail.msftlearn.com/ecp -ExternalUrl https://mail.msftlearn.com/ecp
Get-ActiveSyncVirtualDirectory | Set-ActiveSyncVirtualDirectory -InternalUrl https://mail.msftlearn.com/Microsoft-Server-ActiveSync -ExternalUrl https://mail.msftlearn.com/Microsoft-Server-ActiveSync
Get-WebServicesVirtualDirectory | Set-WebServicesVirtualDirectory -InternalUrl https://mail.msftlearn.com/EWS/Exchange.asmx -ExternalUrl https://mail.msftlearn.com/EWS/Exchange.asmx
Get-OabVirtualDirectory | Set-OabVirtualDirectory -InternalUrl https://mail.msftlearn.com/oab -ExternalUrl https://mail.msftlearn.com/oab
Get-PowerShellVirtualDirectory | Set-PowerShellVirtualDirectory -InternalUrl http://mail.msftlearn.com/powershell -ExternalUrl https://mail.msftlearn.com/powershell
Get-ClientAccessServer | Set-ClientAccessServer -AutoDiscoverServiceInternalUri https://mail.msftlearn.local/Autodiscover/Autodiscover.xml
#申請證書
New-ExchangeCertificate -GenerateRequest -FriendlyName "Mail-Cert" -DomainName mail.msftlearn.com,autodiscover.msftlearn.com -PrivateKeyExportable $true -KeySize 2048 -RequestFile C:\mailcert.req
Import-ExchangeCertificate -FileName C:\mailcert.cer | Enable-ExchangeCertificate -Services "iis,smtp,pop,imap"